Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwvgskoRnTs-k_0M07NBWiwNAbg.cer
File: rwvgskoRnTs-k_0M07NBWiwNAbg.cer (raw, json)
Hash identifier: RJMLzUNYz7dMBv/yFYgazktcYUt5fmjcBXGibU233B0=
Subject key identifier: AF:0B:E0:B2:4A:11:9D:3B:3E:93:FD:0C:D3:B3:41:5A:2C:0D:01:B8
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0211F9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9181437/DEB0FBC6489A11EC81A2D514C4F9AE02/rwvgskoRnTs-k_0M07NBWiwNAbg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9181437/DEB0FBC6489A11EC81A2D514C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 03 Oct 2024 19:26:19 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 142645
IP: 103.171.176.0/23
IP: 2407:c640::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 15:22:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135673 (0x211f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 3 19:26:19 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A9181437/serialNumber=AF0BE0B24A119D3B3E93FD0CD3B3415A2C0D01B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:05:5d:b0:1e:2a:88:8f:39:6d:14:3d:d7:1d:
fd:1f:c3:31:14:57:72:a5:9a:4d:c5:c0:f8:4d:87:
97:95:14:8b:6a:25:ae:a7:6f:1c:c5:e6:68:88:71:
3e:29:4c:91:c0:e8:c4:7a:38:9e:d8:45:46:55:37:
74:e2:7b:d5:f7:fb:78:1d:3c:8f:4a:e0:72:b1:49:
04:2f:ba:47:2b:08:34:b6:9b:0a:96:36:08:f3:c6:
53:0a:50:06:99:04:21:eb:54:bd:38:4a:8f:06:00:
21:41:65:e8:d1:22:1a:97:09:fa:df:b4:6e:67:84:
55:f9:11:2a:4e:d0:8b:64:d0:d8:bf:fd:3c:f5:9e:
82:41:7e:14:7a:67:14:c0:2b:48:ac:c1:c1:2c:bc:
29:3c:33:ea:4c:80:f5:a9:ea:15:c6:38:cd:ba:ee:
a8:b5:ef:aa:84:05:04:19:ea:28:eb:9f:07:b1:4d:
07:66:80:b7:a9:4c:e8:79:ef:a8:8e:00:bb:35:86:
5c:a9:13:b2:a0:83:dc:43:71:f5:e8:d1:6d:62:94:
4c:44:6e:ef:c1:b4:40:7a:30:e1:0a:cf:c8:9c:0a:
3d:df:08:3b:f0:51:c1:eb:5c:19:e9:1e:08:24:23:
c1:63:f3:0e:57:14:00:12:e7:a8:6f:c4:19:5b:23:
ed:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:0B:E0:B2:4A:11:9D:3B:3E:93:FD:0C:D3:B3:41:5A:2C:0D:01:B8
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9181437/DEB0FBC6489A11EC81A2D514C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9181437/DEB0FBC6489A11EC81A2D514C4F9AE02/rwvgskoRnTs-k_0M07NBWiwNAbg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
142645
sbgp-ipAddrBlock: critical
IPv4:
103.171.176.0/23
IPv6:
2407:c640::/32
Signature Algorithm: sha256WithRSAEncryption
5a:11:75:9d:5a:5d:03:57:61:a4:48:14:07:30:b1:c6:18:f4:
bf:ca:a0:8f:ce:2e:73:f3:32:d3:7f:44:7d:4c:71:7c:51:5a:
56:a7:20:61:24:3e:4b:fb:f6:97:7a:98:b3:d8:0d:32:93:d3:
d6:8e:6d:a9:f5:71:85:c5:64:ef:f9:9e:aa:a1:f6:e3:64:0f:
22:46:34:53:61:da:10:95:c4:22:c2:19:c5:0f:e3:ec:61:35:
6b:c8:11:ae:53:31:08:b6:57:e0:eb:74:51:16:8b:bc:a5:ce:
e7:27:19:77:cb:a7:da:45:f2:96:46:77:c7:64:1b:fd:93:55:
da:ef:fe:f2:c9:fd:c3:e6:4f:78:4f:e6:60:90:32:0e:87:72:
48:1f:83:bd:97:98:cf:3d:5f:6f:36:41:67:2e:70:8d:be:be:
22:ce:4a:2f:1c:2f:7b:de:0f:6f:17:7b:c6:dd:6d:14:1c:fe:
d2:5e:9d:3a:91:bc:f0:7a:7a:bc:1c:97:5a:80:79:8b:d0:6b:
a1:79:6f:16:03:85:6d:69:d8:5e:31:31:95:43:42:be:f7:07:
ec:23:2f:c1:d4:92:23:8b:52:32:12:e7:51:c5:6d:29:58:39:
0d:56:5d:c1:b6:33:be:0c:65:a4:df:ee:6a:c5:f1:11:61:46:
83:d0:33:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:51:07 2024 by rpki-client on console-ams.rpki-client.org